Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Phillip Hallam-Baker
I think that fabricating a key here is more likely to mean fabricating an authentication 'key' rather than an encryption key. Alexander is talking to Congress and is deliberately being less than precise. So I would think in terms of application level vulnerabilities in Web based document servers.

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Russ Nelson
John Denker writes: It is against NSA policy to attach a thumb drive. I betcha some folks really want to know how he did that without getting caught. Take a mouse. Remove its own electronics. Substitute a Teensy 2 which emulates a mouse AND a thumb drive, but only after a certain combination

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Damien Miller
On Sat, 29 Jun 2013, Alec Muffett wrote: My own, personal guess is that it is obfuscation which translates as using passwords or accessing a portal over SSL plus we're too embarrassed to admit that it was that easy. Or simply: http://cms.intranet.boozallen.com/document?id=${N}

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread StealthMonger
John Gilmore g...@toad.com writes: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] John John's question is not the only one raised by this episode. Eli Lake: Glenn Greenwald, the Guardian journalist who Snowden first contacted

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Florian Weimer
* John Gilmore: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] Most likely, as part of his job at the contractor, he had administrator access to a system which was used for key management, perhaps to apply security updates, manage backups

[Cryptography] crypto breakage in SALT

2013-07-04 Thread Eugen Leitl
Comments? https://github.com/saltstack/salt/commit/5dd304276ba5745ec21fc1e6686a0b28da29e6fc ___ The cryptography mailing list cryptography@metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

[Cryptography] [nicol...@cmu.edu: [fc-announce] Financial Cryptography 2014 Preliminary Call for Papers]

2013-07-04 Thread R. Hirschfeld
--- Start of forwarded message --- Date: Mon, 1 Jul 2013 08:40:55 -0400 From: Nicolas Christin nicol...@cmu.edu Organization: Carnegie Mellon University - INI/CyLab Subject: [fc-announce] Financial Cryptography 2014 Preliminary Call for Papers Preliminary Call for Papers FC 2014

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Phillip Hallam-Baker
I read an article today that claims one and a half million people have a Top Secret clearance. That kind of demonstrates how little Top Secret now means. On Sun, Jun 30, 2013 at 2:16 PM, Florian Weimer f...@deneb.enyo.de wrote: * John Gilmore: [John here. Let's try some speculation about

Re: [Cryptography] crypto breakage in SALT

2013-07-04 Thread Jerry Leichter
Well, one does wonder about an RSA *primitive* that allows an exponent of 1. If that's the tooling you're working atop, it's hard to imagine you're going to produce anything decent. -- Jerry On Jul 1, 2013, at 8:58 AM, Eugen Leitl wrote:

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Richard Salz
How could it be arranged that if anything happens at all to Edward Snowden, he told me he has arranged for them to get access to the full archives? A lawyer or other (paid) confidant was given instructions that would disclose the key. Do this if something happens to me. It doesn't have to be

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Aaron Zauner
Wow. First appearance on this list. Somewhat lame though, just dropping of a link. On Thu, Jul 4, 2013 at 8:47 PM, Phillip Hallam-Baker hal...@gmail.comwrote: I read an article today that claims one and a half million people have a Top Secret clearance.